A multinational company has firewalls in different regions and wants to apply a common base policy to all firewalls, but also apply region-specific policies. How should the architect structure device groups in SCM?

Create a separate device group for each region and duplicate the common policy in each.

Create a parent device group for the common policy and child device groups for each region with region-specific policies.

Create a template for the common policy and a separate template for each region.

Use a single device group and configure region-specific policies on each firewall individually.

Which action is required to enable a firewall to send logs to Strata Logging Service?

Configure the firewall to forward logs to the SLS cloud endpoint

Deploy an on-premises log collector and configure it to receive logs

Enable the firewall's built-in syslog server

Create a device group and assign the firewall to it

A company is integrating SLS with SCM. They want to ensure that only specific types of logs (e.g., threat and traffic) are sent to SLS to reduce storage costs. What should the administrator configure?

Create log forwarding profiles that specify which log types are forwarded to SLS.

Use CIE to filter logs based on user identity.

Set the retention period in SLS to reduce storage.

Configure SLS to filter logs after they are received.

Palo Alto NetworksCertified Network Security Architect

Domain 3Objective 2

3.2 Architect Strata Cloud Manager (SCM), Strata Logging Service, and Cloud Identity Engine NETWORK-SECURITY-ARCHITECT Practice Questions (Page 5)

Part of the Centralized Management and IAM domain, which accounts for 13% of the NETWORK-SECURITY-ARCHITECT exam.

23questions here

5free pages

5concepts

13%of the exam

Questions 21–23

21application · medium
A multinational company has firewalls in different regions and wants to apply a common base policy to all firewalls, but also apply region-specific policies. How should the architect structure device groups in SCM?
Select an answer first
22foundation · easy
Which action is required to enable a firewall to send logs to Strata Logging Service?
Select an answer first
23application · medium
A company is integrating SLS with SCM. They want to ensure that only specific types of logs (e.g., threat and traffic) are sent to SLS to reduce storage costs. What should the administrator configure?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.

3.2 Architect Strata Cloud Manager (SCM), Strata Logging Service, and Cloud Identity Engine NETWORK-SECURITY-ARCHITECT Practice Questions (Page 5)

Questions 21–23

A multinational company has firewalls in different regions and wants to apply a common base policy to all firewalls, but also apply region-specific policies. How should the architect structure device groups in SCM?

Which action is required to enable a firewall to send logs to Strata Logging Service?

A company is integrating SLS with SCM. They want to ensure that only specific types of logs (e.g., threat and traffic) are sent to SLS to reduce storage costs. What should the administrator configure?

Keep studying — Centralized Management and IAM